# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1497 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1498 --- ## [Version control and backup of dashboard/visualization/query object](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148)
**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 2:59am UTC](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148 "2020-04-22T02:59:30Z")
What's the best way to implement an automatic version control and backup system for all the objects created in Kibana for visualization and querying? Should we use export/import API to collect the latest content and push… --- ## [How to apply Third Party or Custom Threat intel feeds with SIEM App?](https://discuss.elastic.co/t/how-to-apply-third-party-or-custom-threat-intel-feeds-with-siem-app/228312)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 2:58am UTC](https://discuss.elastic.co/t/how-to-apply-third-party-or-custom-threat-intel-feeds-with-siem-app/228312 "2020-04-22T02:58:32Z")
Hi Guys, Can anyone please suggest me the way to apply third party threat intel feed to SIEM App? Has that to be done with logstash translate dictionary feature? but since there are multiple indices involved can someone… --- ## [Top match in category](https://discuss.elastic.co/t/top-match-in-category/229114)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 2:50am UTC](https://discuss.elastic.co/t/top-match-in-category/229114 "2020-04-22T02:50:58Z")
Say I have an online bookstore. If someone searches for "dinosaur", I want to return the top 3 matches in fiction, non-fiction, and reference categories. Is this possible with a single query in ES, or would I need to iss… --- ## [Scalability of Logstash when using path =\> "/path/to/file/\*/\*/\*/\*/\*/test.log"](https://discuss.elastic.co/t/scalability-of-logstash-when-using-path-path-to-file-test-log/229143)
**Author:** [@david4](https://discuss.elastic.co/u/david4)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 2:37am UTC](https://discuss.elastic.co/t/scalability-of-logstash-when-using-path-path-to-file-test-log/229143 "2020-04-22T02:37:57Z")
Hello, I'm new to the ELK stack and trying to write a Logstash configuration file to monitor a dynamic file structure. I already have two approaches that work, but really want to learn which is a better way. Approach 1… --- ## [Kibana server is not ready-- clean new install](https://discuss.elastic.co/t/kibana-server-is-not-ready-clean-new-install/228709)
**Author:** [@x0rcist](https://discuss.elastic.co/u/x0rcist)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 2:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-clean-new-install/228709 "2020-04-22T02:32:46Z")
Hi, I followed this post https://www.lahilabs.com/2020/01/02/how-to-install-elk-siem-for-beginners-complete-guide/ I have running elastic curl localhost:9200 { "name" : "vultr.guest", "cluster\_name" : "elasticsearc… --- ## [Field Formatter registration Kibana 7.6.2](https://discuss.elastic.co/t/field-formatter-registration-kibana-7-6-2/228544)
**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 2:07am UTC](https://discuss.elastic.co/t/field-formatter-registration-kibana-7-6-2/228544 "2020-04-22T02:07:39Z")
Hi, I attempted to register my plugin using this: Here is how I used it: But I get this error: I changed the code to this (passing an array with my field formatter): However the page to edit field types comes… --- ## [Logstash service using almost 200% CPU](https://discuss.elastic.co/t/logstash-service-using-almost-200-cpu/229154)
**Author:** [@jai.waghela](https://discuss.elastic.co/u/jai.waghela)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 2:00am UTC](https://discuss.elastic.co/t/logstash-service-using-almost-200-cpu/229154 "2020-04-22T02:00:57Z")
Hi, The logstash service is constantly consuming high CPU above 150%. Below is the error but not sure what to do. PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 32381 logstash 39 19 6650… --- ## [The official documentation on testing has been deleted?](https://discuss.elastic.co/t/the-official-documentation-on-testing-has-been-deleted/229153)
**Author:** [@finn-wa](https://discuss.elastic.co/u/finn-wa)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 1:30am UTC](https://discuss.elastic.co/t/the-official-documentation-on-testing-has-been-deleted/229153 "2020-04-22T01:30:15Z")
https://www.elastic.co/guide/en/elasticsearch/reference/current/testing.html All of the pages in the testing section of the documentation say "This page was deleted." They definitely existed yesterday. What happened? --- ## [Tried to parse field as object, but found a concrete value](https://discuss.elastic.co/t/tried-to-parse-field-as-object-but-found-a-concrete-value/229134)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 12:07am UTC](https://discuss.elastic.co/t/tried-to-parse-field-as-object-but-found-a-concrete-value/229134 "2020-04-22T00:07:44Z")
Hi, I'm running filebeat 7.6.2 with logstash 7.5.1 having missing lines of logs in ES due this warning message ... \[2020-04-21T21:25:21,105\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearc… --- ## [How to query a specific subset of transactions starting with transaction with specific value of a specific field?](https://discuss.elastic.co/t/how-to-query-a-specific-subset-of-transactions-starting-with-transaction-with-specific-value-of-a-specific-field/228888)
**Author:** [@111167](https://discuss.elastic.co/u/111167)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 10:44pm UTC](https://discuss.elastic.co/t/how-to-query-a-specific-subset-of-transactions-starting-with-transaction-with-specific-value-of-a-specific-field/228888 "2020-04-21T22:44:14Z")
Hello. Kibana version: 6.4.2 In usual case, if you need to find specific subset of transactions starting with a transaction with the message field "Unload list of items" you may use id filter, for example. But in my cas… --- ## [ILM and automatic bootstrap?](https://discuss.elastic.co/t/ilm-and-automatic-bootstrap/229053)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 9:59pm UTC](https://discuss.elastic.co/t/ilm-and-automatic-bootstrap/229053 "2020-04-21T21:59:13Z")
Hi, I am struggling with ILM. I want to find out if I can change our environment to use it. Currently we have two fields in our events, which are used for creating the index: logType (defines the part of the applicat… --- ## [Grok filter is not working properly](https://discuss.elastic.co/t/grok-filter-is-not-working-properly/229073)
**Author:** [@Ankit-github-26](https://discuss.elastic.co/u/Ankit-github-26)\ **Replies:** 9\ **Last updated:** [April 21, 2020, 9:43pm UTC](https://discuss.elastic.co/t/grok-filter-is-not-working-properly/229073 "2020-04-21T21:43:39Z")
Hello Guys, I have Filebeat-7.1 installed in a Debian server, this Filebeat send data from files in this Debian server to server with Logstash 7.6 , here are the files config Filebeat.yml: #===========================… --- ## [Installing Logstash plugin for Chef spec](https://discuss.elastic.co/t/installing-logstash-plugin-for-chef-spec/226541)
**Author:** [@meowtochondria](https://discuss.elastic.co/u/meowtochondria)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 9:27pm UTC](https://discuss.elastic.co/t/installing-logstash-plugin-for-chef-spec/226541 "2020-04-21T21:27:29Z")
I am trying to setup tests for Logstash filters. We use Chef, and are having trouble installing plugins for our filters. Here's the spec file that sets up and run the tests. Tests are described in a YAML file, which I do… --- ## [Kibana URL template with relative path](https://discuss.elastic.co/t/kibana-url-template-with-relative-path/228418)
**Author:** [@surajbarde](https://discuss.elastic.co/u/surajbarde)\ **Replies:** 10\ **Last updated:** [April 21, 2020, 9:05pm UTC](https://discuss.elastic.co/t/kibana-url-template-with-relative-path/228418 "2020-04-21T21:05:33Z")
I have a question regarding Kibana URL templates for fields in the index. I have used relative path for the below URL template. On local environment it is replaced with http://localhost:5601/s/reporting/app/kibana#/… --- ## [Cant able to send mail from watcher](https://discuss.elastic.co/t/cant-able-to-send-mail-from-watcher/229131)
**Author:** [@rakeshraagu2](https://discuss.elastic.co/u/rakeshraagu2)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 8:56pm UTC](https://discuss.elastic.co/t/cant-able-to-send-mail-from-watcher/229131 "2020-04-21T20:56:41Z")
Hi All, Iam trying to send alert mail from watcher but failed to send mail. Iam using a gmail account. This is the error message i gets from cluster log \[2020-04-22T02:20:37,420\]\[ERROR\]\[o.e.x.w.a.e.ExecutableEmailAct… --- ## [Migrating from 1.1.1 to 7.6.0](https://discuss.elastic.co/t/migrating-from-1-1-1-to-7-6-0/229126)
**Author:** [@RyanUI](https://discuss.elastic.co/u/RyanUI)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 8:43pm UTC](https://discuss.elastic.co/t/migrating-from-1-1-1-to-7-6-0/229126 "2020-04-21T20:43:09Z")
I have an older cluster (by old I mean 1.1.1) that has been doing exactly what it's needed to be doing.. Working. I've been meaning to upgrade it for a while now but time just got away from me! the data isn't that l… --- ## [How to change type of field from Geo\_Point to Text?](https://discuss.elastic.co/t/how-to-change-type-of-field-from-geo-point-to-text/228964)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 4\ **Last updated:** [April 21, 2020, 8:33pm UTC](https://discuss.elastic.co/t/how-to-change-type-of-field-from-geo-point-to-text/228964 "2020-04-21T20:33:03Z")
hey all, I have a problem, I put data into elastic type geo\_point but the data had value "NaN, NaN" and 999,999. I get an error like : ''' type: 'mapper\_parsing\_exception', reason: 'failed to parse the \[destinationLo… --- ## [Built\_assets/dll folder is empty in the kibana tar file(linux) generated from the source code](https://discuss.elastic.co/t/built-assets-dll-folder-is-empty-in-the-kibana-tar-file-linux-generated-from-the-source-code/228958)
**Author:** [@Nandhini\_Subburaj](https://discuss.elastic.co/u/Nandhini_Subburaj)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 8:16pm UTC](https://discuss.elastic.co/t/built-assets-dll-folder-is-empty-in-the-kibana-tar-file-linux-generated-from-the-source-code/228958 "2020-04-21T20:16:14Z")
I am using kibana 7.6.2. I followed this guide(https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#setting-up-your-development-environment) to create the build from the kibana source code. Build was successful… --- ## [How can we include a standalone html page with scripts inside a custom Kibana plugin](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799)
**Author:** [@pranay\_bhatnagar](https://discuss.elastic.co/u/pranay_bhatnagar)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 7:55pm UTC](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799 "2020-04-21T19:55:11Z")
I am using custom Kibana plugin in which i want to use a external html page with many script tags inside a plugin UI. How can i include external html page and scripts inside my Kibana plugin UI. --- ## [Visualizing a single string of text in kibana](https://discuss.elastic.co/t/visualizing-a-single-string-of-text-in-kibana/228693)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 7:30pm UTC](https://discuss.elastic.co/t/visualizing-a-single-string-of-text-in-kibana/228693 "2020-04-21T19:30:30Z")
I'm trying to have markdown which will display only single value from one of the index. I tried using metric but it doesn't have the expected results. I did some SO search and found some thing create our own visuals I w… --- ## [Kibana alerts and use case](https://discuss.elastic.co/t/kibana-alerts-and-use-case/229071)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 7:07pm UTC](https://discuss.elastic.co/t/kibana-alerts-and-use-case/229071 "2020-04-21T19:07:50Z")
Hello there, i am trying to get alerts in kibana and i am looking for some use cases library if there is any. ( i am trying to build a small SIEM using ELk stack and beats) Thank you in advance --- ## [Fingerprint to get the last out of user\_agent](https://discuss.elastic.co/t/fingerprint-to-get-the-last-out-of-user-agent/229120)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 6:39pm UTC](https://discuss.elastic.co/t/fingerprint-to-get-the-last-out-of-user-agent/229120 "2020-04-21T18:39:45Z")
Hi i have now nearly finished the parsing of my nginx access logfile. This line is the "user\_agent" field. I parse with my filter already different stuff out of that. Chrome example: "Mozilla/5.0 (Windows NT 10.0; Wi… --- ## [Visualize:unknown error](https://discuss.elastic.co/t/visualize-unknown-error/228444)
**Author:** [@kaviraj](https://discuss.elastic.co/u/kaviraj)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 6:01pm UTC](https://discuss.elastic.co/t/visualize-unknown-error/228444 "2020-04-21T18:01:00Z")
Hello, While monitoring the application we have observed an error, if we kept the GUI idle for a while 5 mins we have seen this “Visualize:unknown error” But this issue is seen only in Microsoft Edge , sometimes in Moz… --- ## [Issue with CAST](https://discuss.elastic.co/t/issue-with-cast/229104)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 5:47pm UTC](https://discuss.elastic.co/t/issue-with-cast/229104 "2020-04-21T17:47:48Z")
Hello, I have an IP address in my database which I'm trying to extract and ingest into Elastic. I originally did a CAST on this statement (required as logstash did not like the source format). input { jdbc { … --- ## [Getting Named Groups from pattern tokenizer](https://discuss.elastic.co/t/getting-named-groups-from-pattern-tokenizer/229107)
**Author:** [@HAKSOAT](https://discuss.elastic.co/u/HAKSOAT)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 5:34pm UTC](https://discuss.elastic.co/t/getting-named-groups-from-pattern-tokenizer/229107 "2020-04-21T17:34:09Z")
I am currently making use of the Pattern tokenizer to specify my own regex for extracting tokens. I have named groups in the regex, and I have no idea how I can extract them from the returned tokens. --- ## [Command to find elasticsearch python client version](https://discuss.elastic.co/t/command-to-find-elasticsearch-python-client-version/229101)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 5:27pm UTC](https://discuss.elastic.co/t/command-to-find-elasticsearch-python-client-version/229101 "2020-04-21T17:27:28Z")
how do i find what version of elasticsearch python client i am running ? --- ## [Load index pattern from Default Space to New Space](https://discuss.elastic.co/t/load-index-pattern-from-default-space-to-new-space/228945)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 4\ **Last updated:** [April 21, 2020, 4:46pm UTC](https://discuss.elastic.co/t/load-index-pattern-from-default-space-to-new-space/228945 "2020-04-21T16:46:14Z")
I have two spaces named- Default and XYZ. I made a user role called abc which has read only access to discover, dashboards and such tabs. In default I have indexes which have data and logs. I have made dashboards in def… --- ## [Sincedb\_clean\_after not working in logstash plugin](https://discuss.elastic.co/t/sincedb-clean-after-not-working-in-logstash-plugin/225411)
**Author:** [@Mohsin\_Alam](https://discuss.elastic.co/u/Mohsin_Alam)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 4:39pm UTC](https://discuss.elastic.co/t/sincedb-clean-after-not-working-in-logstash-plugin/225411 "2020-04-21T16:39:32Z")
This is my config. file for logstash file input plugin: file { id =\> "my\_plugin\_id" type =\> "log" path =\> "/uploads//.log" mode =\> "read" start\_position =\> beginning sincedb\_clean\_after =\> "10 seconds" codec =\> … --- ## [How to get integer field with comma-seperator to add\_field](https://discuss.elastic.co/t/how-to-get-integer-field-with-comma-seperator-to-add-field/228818)
**Author:** [@Phornkrit\_Hirunyanit](https://discuss.elastic.co/u/Phornkrit_Hirunyanit)\ **Replies:** 4\ **Last updated:** [April 21, 2020, 4:13pm UTC](https://discuss.elastic.co/t/how-to-get-integer-field-with-comma-seperator-to-add-field/228818 "2020-04-21T16:13:07Z")
Hello Developer, I have some issue for ask you all I tried to get field %{NUMBER:linenr:int} This is the results At add\_field mutate{ add\_field =\> { "linenrMeassage" =\> "%{fact\_or\_dim}: %{linenr} rows lo… --- ## [LoadError: no such file to load -- bundler](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler/229081)
**Author:** [@csaket](https://discuss.elastic.co/u/csaket)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 4:07pm UTC](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-bundler/229081 "2020-04-21T16:07:28Z")
I am running Fedora 31 and have just installed logstash 7.6.2 When I try to install a plugin I get this error LoadError: no such file to load -- bundler sudo DEBUG=1 /usr/share/logstash/bin/logstash-plugin install --lo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1496) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1498)